Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: 4ZRtO11oW8MIm14XU2NBSKGgmS0oBkCoLwJuzIY6N2A=
Subject key identifier: 23:63:32:35:C0:18:B5:00:85:22:7B:C5:2A:C4:88:A9:7F:35:D9:77
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 01965537F6C65ABBB36C23AD4A3770833E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0BD4
Signing time: Sun 20 Apr 2025 22:00:53 +0000
Manifest this update: Sun 20 Apr 2025 22:00:53 +0000
Manifest next update: Mon 21 Apr 2025 22:00:53 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: k73ymYFTGgkpjaThGGAYh3g0Vz9YREmWHsdX99EYkg0=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f6:c6:5a:bb:b3:6c:23:ad:4a:37:70:83:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Apr 20 22:00:53 2025 GMT
Not After : Apr 21 22:00:53 2025 GMT
Subject: CN=23633235c018b50085227bc52ac488a97f35d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:2c:e7:8c:db:cc:7a:17:6a:3e:1f:4c:4c:
85:16:8e:e8:54:f5:ed:d8:cf:cc:59:e9:95:76:e4:
70:05:fe:3d:f2:da:59:04:ca:c0:e1:e3:dc:c3:37:
2f:ae:55:00:73:b6:7c:ea:6c:ab:10:f9:24:06:77:
a9:d2:b8:01:a5:b8:f1:b6:3e:7d:c3:8c:b6:8b:c8:
82:e3:01:47:53:0a:93:80:4c:39:fd:c1:f8:ca:ab:
94:f7:43:32:12:18:6d:7d:41:d3:cf:55:5a:b1:37:
d4:79:3e:3f:4d:88:20:75:bb:6e:2f:ce:5c:04:87:
94:b7:9b:9e:92:68:2c:da:65:8d:ae:eb:a6:71:53:
26:7f:72:af:27:f3:6d:42:8d:e5:b9:23:ae:92:d5:
b2:5f:73:6c:dd:4b:d2:21:9a:04:3a:6a:9d:16:3f:
b0:75:00:1f:9e:f1:20:82:77:eb:01:a8:bc:a0:31:
47:3b:dc:6d:f9:0d:8e:97:e7:5d:ce:60:4a:74:c3:
fa:b3:04:ca:1e:b6:2a:8f:45:8b:23:5c:3d:31:8d:
cc:b8:c3:68:57:21:fb:e9:02:e1:87:fe:74:9e:ae:
d5:3a:73:ac:5f:3c:00:c8:e4:48:10:4c:a1:78:c8:
75:b5:7a:6b:69:aa:ee:da:e0:a8:09:c3:31:31:50:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:32:35:C0:18:B5:00:85:22:7B:C5:2A:C4:88:A9:7F:35:D9:77
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fa:a2:bf:68:ba:e5:01:cb:71:5e:69:21:1b:f4:f1:11:9b:
73:0b:2d:4d:ea:52:0c:a4:c2:db:01:ac:a4:15:cb:ee:f8:d4:
8d:71:c3:48:dd:31:3c:e0:02:da:c5:fe:92:62:09:ee:4b:3c:
92:75:69:17:61:be:62:ee:6d:fd:0d:c4:1d:74:86:6c:8a:94:
d0:66:e0:93:96:af:1f:62:d8:c0:32:d6:7b:00:04:84:32:e4:
2a:48:3e:5a:2e:92:84:5a:93:48:b6:3d:00:c5:eb:0b:3a:4c:
6d:76:10:04:44:cd:45:f6:98:d8:12:b2:12:07:53:c1:86:56:
07:d0:45:7e:f2:e9:80:70:86:82:f5:96:9b:8f:e7:4d:19:00:
c7:cf:87:19:18:82:58:fc:f6:5f:93:6d:d3:a8:c5:cd:4c:da:
c5:38:34:8c:53:3a:ac:30:13:10:12:ab:47:8f:9d:31:13:41:
d6:ad:42:8c:3e:b0:0a:f5:11:5e:fd:3b:11:e1:d7:f2:28:b0:
d1:94:ce:16:13:f8:0c:e0:ec:13:64:0d:32:d0:15:46:3c:00:
02:bc:7f:e6:e9:f0:9f:60:bf:65:f9:92:19:73:1a:73:4d:b5:
98:d7:b7:be:ad:1b:82:ea:df:01:4b:e4:26:0f:98:2f:36:39:
bc:cb:dc:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN/bGWruzbCOtSjdwgz5GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjUwNDIwMjIwMDUzWhcNMjUwNDIxMjIwMDUzWjAzMTEwLwYDVQQD
EygyMzYzMzIzNWMwMThiNTAwODUyMjdiYzUyYWM0ODhhOTdmMzVkOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRAs54zbzHoXaj4fTEyFFo7oVPXt
2M/MWemVduRwBf498tpZBMrA4ePcwzcvrlUAc7Z86myrEPkkBnep0rgBpbjxtj59
w4y2i8iC4wFHUwqTgEw5/cH4yquU90MyEhhtfUHTz1VasTfUeT4/TYggdbtuL85c
BIeUt5uekmgs2mWNruumcVMmf3KvJ/NtQo3luSOuktWyX3Ns3UvSIZoEOmqdFj+w
dQAfnvEggnfrAai8oDFHO9xt+Q2Ol+ddzmBKdMP6swTKHrYqj0WLI1w9MY3MuMNo
VyH76QLhh/50nq7VOnOsXzwAyORIEEyheMh1tXpraaru2uCoCcMxMVBh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNjMjXAGLUAhSJ7xSrEiKl/Ndl3MB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPqiv2i6
5QHLcV5pIRv08RGbcwstTepSDKTC2wGspBXL7vjUjXHDSN0xPOAC2sX+kmIJ7ks8
knVpF2G+Yu5t/Q3EHXSGbIqU0Gbgk5avH2LYwDLWewAEhDLkKkg+Wi6ShFqTSLY9
AMXrCzpMbXYQBETNRfaY2BKyEgdTwYZWB9BFfvLpgHCGgvWWm4/nTRkAx8+HGRiC
WPz2X5Nt06jFzUzaxTg0jFM6rDATEBKrR4+dMRNB1q1CjD6wCvURXv07EeHX8iiw
0ZTOFhP4DODsE2QNMtAVRjwAArx/5unwn2C/ZfmSGXMac021mNe3vq0bgurfAUvk
Jg+YLzY5vMvc3w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:29:02 2025 by rpki-client